PatchTheCVEwebmplayer vulnerabilities and fixes
Recent CVEs affecting webmplayer, with upgrade or downgrade steps. 2 tracked.
webmplayer has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-03-02. Highest priority: CVE-2007-1136 (score 44/100).
- CVE-2007-1136 MEDIUM 6.8 UPGRADE index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacha
- CVE-2007-1135 MEDIUM 6.8 UPGRADE Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbi
FAQ
How do I fix webmplayer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webmplayer being exploited right now?
None of the tracked webmplayer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webmplayer CVE should I patch first?
CVE-2007-1136 currently ranks highest (44/100): index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacha.